Maybe this will bring back a form of domain fronting. Let the user put in a list of hosts that your tyrannical dictatorship allows through its firewall, and then do a fake DNS lookup through your local DNS server for them, then use the resulting IP to access other hosts on the same CDN.